CVE-2014-0087
High
Description
The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remote authenticated users to bypass authorization and gain privileges by leveraging improper RBAC checking, related to the rbac_user_edit action.
SeverityHigh
CVSS8.8
Exploit probability79. percentile1.8%
Product
Redhat Cloudforms Management Engine
PublishedJan 11, 2018
First seenJan 11, 2018
How to fix
Update
- redhat cloudforms_management_engine5.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat cloudforms_management_engine | v < 5.3 | 5.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.